"Alerted.org

8116 - Midtown Office - 2220 W. Broad Street, Richmond, Virginia, 23220

CarMax, the way your career should be!

We are looking for a Technology Compliance Analyst II to maintain and enhance the IT control environment of an innovative and fast paced company that is leveraging technology to provide innovative methods to improve the car buying experience. This is a unique opportunity to work at a Fortune 200 company and national brand to expand your skills and influence a growing Technology Program. This role will partner with the Technology teams to evaluate controls, perform control testing to ensure continuous compliance, modernize control methodologies through automation and artificial intelligence, and streamline controls to improve the program’s efficiency and effectiveness.

What you will do – Essential Responsibilities

+ Perform compliance testing and control assessments (e.g., SOX, PCI DSS, HIPAA), including documentation, root cause analysis, and remediation validation.

+ Conduct SSAE 18 audits of third-party providers and monitor remediation plans.

+ Maintain awareness of evolving compliance standards (e.g., NIST, ITIL, data privacy) and apply them to control design and testing.

+ Identify, analyze, and report control risks and trends using data-driven insights.

+ Recommend and implement control improvements based on testing outcomes and policy-process gaps.

+ Leverage automation and AI to modernize control methodologies and reduce manual processes.

+ Partner with technology teams and control owners to evaluate and improve control environments.

+ Prepare and deliver clear, timely communications of findings, recommendations, and action plans.

+ Facilitate control reviews and discussions across business areas and evolving processes.

+ Provide consultative support to internal stakeholders, ensuring alignment with compliance goals.

Purpose of the role

As a Technology Compliance Analyst II, you will play a key role in strengthening our IT control environment by driving innovation, collaboration, and continuous improvement. You’ll work closely with product, technology, and compliance teams to design controls, assist with control execution, and perform testing and validation. This role is ideal for someone who thrives in a fast-paced environment, is passionate about technology and compliance, and embraces automation and data-driven insights to modernize practices. Success in this role requires strong communication skills, attention to detail, a proactive mindset, and a commitment to delivering high-impact solutions that enhance operational resilience and ensure regulatory alignment.

Qualifications and Requirements

+ Bachelor’s degree in business / computer science / information systems(or related)

+ 2+ years working experience in technology compliance, IT Audit, SOX Compliance, or related experience

+ Knowledge of information security, technology compliance industry frameworks and standards

+ Outstanding attention to detail with the ability to spot inconsistencies and errors while sifting through numerous spreadsheets and documents

+ Possess strong organization and time management skills under pressure

+ Demonstrated flexibility in a fast-paced, rapidly evolving environment

+ Good analytical skills with experience in data analysis to support reporting and testing processes

+ Strong communication skills (both verbal and written)

+ Building & delivering clean presentations while tailoring messages to various audiences

+ Facilitating group discussions with diplomacy while seeking diverse opinion

+ Dedication and commitment to top notch service to exceed internal customer expectations

+ Desire to keep current with technology and emerging technology compliance trends

+ Demonstrate initiative, ownership, and a service-oriented mindset in all interactions.

Preferred Experience:

• Experience in performing risk-based testing for control compliance, including the identification, assessment, and mitigation of compliance issues: understanding how to balance the company’s risk appetite to compliance needs/requirements.

• Knowledge and experience with technology controls across a variety of Industry frameworks and how to test and assess controls supporting compliance for SOX, PCI, and Privacy.

• Knowledge and experience in utilizing data analysis software including Excel (advanced proficiency), Splunk Dashboards, and PowerBI. SQL scripting experience is a plus.

• Knowledge of Azure and Oracle Financials is a plus.

• One or more of the following industry recognized certifications recommended: CISA, CRISC, CIA, PCI, CISSP.

• Assist in developing dynamic approaches to advance the Technology Compliance program utilizing a variety of testing methods (manual and automated) to provide both qualitative and quantitative results.

• Proven ability to independently gather test evidence and translate compliance findings into actionable improvement opportunities

**Work Location and Arrangement:** This role can be based out of the CarMax Home Office in Richmond, VA or Dallas Technology Hub and will have a Hybrid work arrangement

Work Authorization:** Applicants must be currently authorized to work in the United States on a full-time basis. **Sponsorship will not be considered for this specific role.

About CarMax

CarMax disrupted the auto industry by delivering the honest, transparent and high-integrity experience customers want and deserve. This innovative thinking around the way cars are bought and sold has helped us become the nation’s largest retailer of used cars, with over 250 locations nationwide.

Our amazing team of more than 25,000 associates work together to deliver iconic customer experiences. Along the way, we help every associate grow their career and achieve their best, at work and in their community. We are recognized for our commitment to training and diversity and are one of the FORTUNE 100 Best Companies to Work For®.

Our Commitment to Diversity and Inclusion:

CarMax is committed to bringing together people from different backgrounds and perspectives, providing employees with a safe, welcoming, and inclusive work environment.

CarMax is an equal opportunity employer, and all qualified candidates will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, protected veteran status, disability status, or any other characteristic protected by law.

Upon an applicant's request, CarMax will consider reasonable accommodation to complete the CarMax Job Application.